Static task
static1
Behavioral task
behavioral1
Sample
4abc821703d35620b963c2ace60c8c1974d425de793efa8e5b177bd14a616dcd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4abc821703d35620b963c2ace60c8c1974d425de793efa8e5b177bd14a616dcd.exe
Resource
win10v2004-20221111-en
General
-
Target
4abc821703d35620b963c2ace60c8c1974d425de793efa8e5b177bd14a616dcd
-
Size
92KB
-
MD5
a2e72a1a2c374bedc6a777fe3ce5ffff
-
SHA1
6560022fce4806f03daffa0f58c91b134992776c
-
SHA256
4abc821703d35620b963c2ace60c8c1974d425de793efa8e5b177bd14a616dcd
-
SHA512
95623d338524c21becf191238a07ea81b90166e952c5c1f56f29958ae511121f0534cc015dfd7124dece51db9a2bd5316adb08a29cf3c3e6f77d9f03ebdc9545
-
SSDEEP
1536:b56ptttIW/aNp2wa57AYCYifXVQ60vfqvw1v1BYjEErxTWDTMqhGKYIZTET8u5j2:9vW/Op2wa5hCY6WqvwZ1mjBkMqhGKZTs
Malware Config
Signatures
Files
-
4abc821703d35620b963c2ace60c8c1974d425de793efa8e5b177bd14a616dcd.exe windows x86
f3effed001af960105645e6aa13ba581
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDriveStringsW
HeapCreateTagsW
CheckRemoteDebuggerPresent
LZOpenFileA
EnumResourceTypesA
GetTempPathA
GetNativeSystemInfo
FindNextVolumeA
GetCommProperties
GetProcessAffinityMask
QueryPerformanceFrequency
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 26KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE